Privacy Policy — Rust Player Track Pair Helper

Last updated: 2026-06-04. Canonical version: https://www.rustplayertrack.app/legal/extension-privacy

SUMMARY

This extension exists for one task: bridging Facepunch's Rust+ Steam login flow to your rustplayertrack.app account so you can pair Rust game servers from your browser. We collect no analytics. We sell no data. The extension ships with no telemetry of any kind.

WHAT DATA THE EXTENSION TOUCHES

The extension reads exactly two values:

1. Your Steam ID — provided by Facepunch after you complete the Rust+ sign-in flow on companion-rust.facepunch.com.
2. A short-lived Rust+ AuthToken — also provided by Facepunch, valid for approximately 14 days. Used by rustplayertrack.app to register a Firebase Cloud Messaging listener on your behalf so the dashboard knows when you click "Pair with Server" in-game.

Both values flow in memory only. The extension does not write them to extension storage, localStorage, sessionStorage, cookies, IndexedDB, or any other persistent surface.

WHERE THE DATA GOES

The Steam ID and AuthToken are forwarded to a tab open on rustplayertrack.app (or a recognized preview/staging subdomain). The webapp then sends them to its own backend over HTTPS, where they are encrypted at rest using AES-256-GCM. The extension itself does not communicate with any third party.

PERMISSIONS

The extension declares host_permissions for only four hosts:

• https://companion-rust.facepunch.com/* — to install the ReactNativeWebView shim that captures Facepunch's response.
• https://rustplayertrack.app/ and https://.rustplayertrack.app/* — to forward credentials and expose a presence marker.
• http://localhost:5173/* — development only.

It additionally requests the tabs permission for one purpose: locating your open rustplayertrack.app tab so the captured pairing message can be delivered to it. The extension queries only for rustplayertrack.app and localhost URL patterns — it never enumerates, reads, or modifies any other tab. It does not request all_urls, storage, cookies, webRequest, or any other broad permission.

BACKGROUND ACTIVITY

The extension registers a minimal background relay (a background script on Firefox) whose only job is re-broadcasting the captured pairing message from the Facepunch tab to your open rustplayertrack.app tab — browsers do not allow two content scripts to message each other directly. It is event-driven, holds no state, performs no network requests of its own, and does nothing unless a pairing hand-off is in flight.

SOURCE

The extension's source code is part of the rustplayertrack.app repository. Every line that runs on your machine is auditable.

CONTACT

Questions: support@rustplayertrack.app